Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
File:                     7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer (raw, json)
Hash identifier:          wbD7sIt3WHQRIUSiTa5QANUyZhzPmWClssamM6CO0wE=
Subject key identifier:   7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E89532620855369533C09247A0B79BB7819869E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Oct 2024 13:45:03 +0000
Certificate not after:    Thu 02 Oct 2025 13:50:03 +0000
Subordinate resources:    AS: 267270
                          IP: 45.232.156.0/22
                          IP: 2804:4ae4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:53:26:20:85:53:69:53:3c:09:24:7a:0b:79:bb:78:19:86:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  3 13:45:03 2024 GMT
            Not After : Oct  2 13:50:03 2025 GMT
        Subject: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:ac:f6:80:1a:a1:be:9d:13:f6:d1:05:49:
                    26:f6:c8:4d:f6:ee:de:c5:5c:ed:81:d3:a1:5b:08:
                    57:02:36:6c:85:92:bc:ec:99:5d:6d:3f:e4:69:b8:
                    3f:da:9c:60:13:6b:bd:70:c6:eb:61:98:04:55:5e:
                    00:b0:4c:d3:f8:88:91:13:bb:c5:9f:5a:a7:e3:08:
                    07:2e:0e:51:cc:14:79:a1:bd:6e:51:b0:31:f2:34:
                    b5:9b:f3:e0:8b:74:39:b9:6c:9d:49:55:eb:7e:7b:
                    26:5f:7b:dc:c1:bb:ff:8a:42:47:07:c1:82:d8:aa:
                    cb:cb:69:5c:36:33:a9:55:cb:40:d3:5b:2e:0d:b1:
                    d7:e2:fd:10:31:2c:62:8b:db:f1:9b:a9:7c:45:c1:
                    ee:07:a2:35:71:a9:03:ed:2c:d3:59:46:09:90:a8:
                    d3:24:41:10:3e:81:88:31:69:c6:1e:5e:cf:fe:23:
                    57:a7:71:80:0a:24:c9:47:33:4f:c1:b8:da:d0:01:
                    a0:00:80:cd:6a:05:50:91:e6:a6:cc:bf:11:d6:73:
                    4e:c9:18:a5:30:e9:75:b8:a8:23:10:40:93:b5:46:
                    97:ae:57:7c:d9:ee:61:5c:e5:ae:a3:c4:69:53:f8:
                    8f:1a:84:e6:11:72:1b:e8:29:8c:c4:f5:98:58:1a:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22
                IPv6:
                  2804:4ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267270

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:9d:fa:a4:0b:a4:78:aa:ee:84:c1:29:f7:8e:c6:76:60:
         99:58:5e:f6:f8:cd:cf:17:ba:99:d4:26:63:cd:bf:99:0c:6f:
         5b:b3:91:e7:9c:a1:3f:96:66:fb:38:96:14:2c:0d:bb:8f:3c:
         66:f5:15:72:37:0b:c5:38:6d:07:e1:23:1d:f2:14:1e:86:46:
         16:45:76:de:3d:12:46:40:b8:22:e2:e0:c1:a4:08:3b:85:86:
         d5:e0:82:33:35:cf:b5:56:ba:6a:b2:b8:d0:a3:d4:df:15:f0:
         83:31:1d:e5:e5:44:7b:6a:88:4b:88:94:b7:77:62:6e:3b:c4:
         ff:e7:71:66:27:63:4f:07:b1:d2:22:29:3c:1d:b5:f4:23:c9:
         ef:04:52:fc:ed:c2:ba:73:6c:51:0b:fc:90:8d:af:7a:76:81:
         74:43:68:8e:fc:46:5d:30:5e:08:19:06:3a:2a:9a:ff:0d:c2:
         b5:19:66:2f:0c:0f:bc:bb:20:75:5b:39:2b:7a:f0:eb:fd:d4:
         26:78:5f:a2:b4:32:a1:d6:df:35:1f:b8:c6:07:d9:3d:e3:dc:
         c7:a2:21:5b:56:39:45:13:b1:48:3b:53:8d:6a:4a:ed:47:13:
         ed:b4:45:39:d9:67:cf:6c:ba:ff:e5:ad:5f:53:c6:20:3b:76:
         a5:14:2c:b1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbolTJiCFU2lTPAkkegt5u3gZhp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDMxMzQ1MDNaFw0yNTEwMDIxMzUwMDNaMDMxMTAvBgNV
BAMTKDdBQkM4NDY4RTU3NTg5ODk5MzZEQkU4RDFGNEFBQjA2QjlCMzQ4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGT6z2gBqhvp0T9tEFSSb2yE32
7t7FXO2B06FbCFcCNmyFkrzsmV1tP+RpuD/anGATa71wxuthmARVXgCwTNP4iJET
u8WfWqfjCAcuDlHMFHmhvW5RsDHyNLWb8+CLdDm5bJ1JVet+eyZfe9zBu/+KQkcH
wYLYqsvLaVw2M6lVy0DTWy4Nsdfi/RAxLGKL2/GbqXxFwe4HojVxqQPtLNNZRgmQ
qNMkQRA+gYgxacYeXs/+I1encYAKJMlHM0/BuNrQAaAAgM1qBVCR5qbMvxHWc07J
GKUw6XW4qCMQQJO1RpeuV3zZ7mFc5a6jxGlT+I8ahOYRchvoKYzE9ZhYGkYZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6vIRo5XWJiZNt
vo0fSqsGubNIZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWp2
VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2llRk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlq
dlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzAvN0FC
Qzg0NjhFNTc1ODk4OTkzNkRCRThEMUY0QUFCMDZCOUIzNDg2Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeicMA0EAgACMAcDBQAoBErkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUBjANBgkqhkiG9w0BAQsFAAOCAQEAcKSd+qQLpHiq7oTB
KfeOxnZgmVhe9vjNzxe6mdQmY82/mQxvW7OR55yhP5Zm+ziWFCwNu488ZvUVcjcL
xThtB+EjHfIUHoZGFkV23j0SRkC4IuLgwaQIO4WG1eCCMzXPtVa6arK40KPU3xXw
gzEd5eVEe2qIS4iUt3dibjvE/+dxZidjTwex0iIpPB219CPJ7wRS/O3CunNsUQv8
kI2venaBdENojvxGXTBeCBkGOiqa/w3CtRlmLwwPvLsgdVs5K3rw6/3UJnhforQy
odbfNR+4xgfZPePcx6IhW1Y5RROxSDtTjWpK7UcT7bRFOdlnz2y6/+WtX1PGIDt2
pRQssQ==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:01 2024 by rpki-client on console.sobornost.net